$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f97b55c-99e7-3d69-b344-3265b5e46eae.roa File: 7f97b55c-99e7-3d69-b344-3265b5e46eae.roa (raw, json) Hash identifier: DkvadO1keoIT52EnVIVSiepTgjjIidJ7YAOH6ZVCN/Q= Subject key identifier: 73:13:0E:DE:ED:58:B1:8A:64:D5:C5:EB:5B:DC:6A:89:9F:76:07:72 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F093D066C70BB560F853EF8C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f97b55c-99e7-3d69-b344-3265b5e46eae.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 204.195.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:06:6c:70:bb:56:0f:85:3e:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3ebfdea7-50ff-4ea6-8923-02a74a914f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:ad:80:27:43:9a:67:a3:91:b1:39:af:1b: d9:1f:62:e4:17:d3:c7:04:7b:a1:17:15:2b:2c:3b: b5:8b:d5:6a:2a:80:50:60:11:f4:b0:d6:9b:0a:67: ec:dc:4b:ae:90:3e:a9:6e:db:28:c9:10:89:f7:eb: 47:4d:96:42:00:aa:6a:99:a3:57:ad:05:2b:6b:f5: d7:0a:8e:bd:3e:a6:3d:dd:c3:4e:ea:92:56:10:02: 30:48:a9:8b:85:fb:15:53:1d:4d:8e:2c:b7:f7:d4: 54:11:d6:33:d0:36:3b:08:68:84:a1:7c:d7:14:e8: db:65:23:01:d4:8e:fd:88:d6:2f:d1:43:68:0c:87: da:2c:ec:cd:a8:b8:37:f4:aa:36:07:2d:0f:25:6c: 08:2a:fd:c8:0f:fb:ec:00:6a:2e:49:eb:0d:6e:cc: 39:ad:7f:dc:ed:43:6e:5b:a6:b1:60:77:f1:37:55: f5:76:e1:19:a0:2b:cf:6b:89:78:ba:a7:06:e3:29: ec:56:33:2d:c7:dc:ec:f3:bc:e2:cd:4d:1e:b0:4f: 3c:cd:fc:3b:8f:a9:b0:97:92:9f:62:18:41:0d:ba: 0b:46:e9:66:7e:00:97:b4:8b:40:45:12:0b:8f:0d: 48:18:4d:03:1f:2a:93:d1:d4:36:06:60:0b:47:7e: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:0E:DE:ED:58:B1:8A:64:D5:C5:EB:5B:DC:6A:89:9F:76:07:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f97b55c-99e7-3d69-b344-3265b5e46eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0f:11:ba:f2:7c:10:3d:02:9c:2b:84:7b:93:9d:5b:22:f4: 82:dc:7c:81:07:37:7a:e7:80:b2:17:d9:9f:2a:86:47:32:21: eb:20:52:c3:4e:c7:d4:dc:df:9f:fa:15:68:59:c7:9e:a4:e8: 84:7d:42:c6:ac:14:9a:87:18:6e:c5:ee:75:13:59:2b:4d:1f: 06:59:40:d8:53:52:ae:3d:50:cb:03:5c:5c:da:ab:5b:a8:71: f0:ca:56:9f:57:97:58:09:50:8f:a2:b8:d2:c2:ed:9e:bc:97: 8f:8e:df:5e:a7:2f:4d:be:b1:c1:88:48:5e:33:63:de:b6:f8: a4:aa:7a:81:5e:ba:49:fb:f5:6d:0c:14:ca:37:c9:d6:c4:f5: dd:7c:58:4a:77:08:00:34:2c:b4:8b:cb:88:66:82:17:35:23: ba:be:d2:3b:c6:e3:0a:00:85:49:4f:72:8d:aa:2e:3b:37:46: 2c:b2:d9:0f:c6:4e:25:8d:aa:3f:69:98:e8:98:4e:9e:76:af: 15:74:90:15:f5:95:4e:ed:54:d9:fd:93:5b:9d:ae:54:3f:0d: b5:b4:8a:a2:e1:2c:11:ea:64:d5:de:38:a0:59:86:c4:37:90: 85:d3:15:5a:c6:34:d3:bf:00:e3:65:52:0b:ec:b5:10:b5:58: 74:61:d5:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQZscLtWD4U++MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk M2ViZmRlYTctNTBmZi00ZWE2LTg5MjMtMDJhNzRhOTE0Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif+tgCdDmmejkbE5rxvZH2LkF9PHBHuhFxUr LDu1i9VqKoBQYBH0sNabCmfs3EuukD6pbtsoyRCJ9+tHTZZCAKpqmaNXrQUra/XX Co69PqY93cNO6pJWEAIwSKmLhfsVUx1Njiy399RUEdYz0DY7CGiEoXzXFOjbZSMB 1I79iNYv0UNoDIfaLOzNqLg39Ko2By0PJWwIKv3ID/vsAGouSesNbsw5rX/c7UNu W6axYHfxN1X1duEZoCvPa4l4uqcG4ynsVjMtx9zs87zizU0esE88zfw7j6mwl5Kf YhhBDboLRulmfgCXtItARRILjw1IGE0DHyqT0dQ2BmALR34kDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMTDt7tWLGKZNXF61vcaomfdgdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2Y5N2I1NWMtOTllNy0z ZDY5LWIzNDQtMzI2NWI1ZTQ2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwPEbryfBA9ApwrhHuTnVsi9ILcfIEHN3rngLIX2Z8qhkcyIesgUsNO x9Tc35/6FWhZx56k6IR9QsasFJqHGG7F7nUTWStNHwZZQNhTUq49UMsDXFzaq1uo cfDKVp9Xl1gJUI+iuNLC7Z68l4+O316nL02+scGISF4zY962+KSqeoFeukn79W0M FMo3ydbE9d18WEp3CAA0LLSLy4hmghc1I7q+0jvG4woAhUlPco2qLjs3Riyy2Q/G TiWNqj9pmOiYTp52rxV0kBX1lU7tVNn9k1udrlQ/DbW0iqLhLBHqZNXeOKBZhsQ3 kIXTFVrGNNO/AONlUgvstRC1WHRh1dY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:57:21 2026 by rpki-client